Medium severity6.1OSV Advisory· Published Mar 30, 2019· Updated Jun 17, 2026
CVE-2019-10646
CVE-2019-10646
Description
Wolf CMS v0.8.3.1 is affected by cross site scripting (XSS) in the module Add Snippet (/?/admin/snippet/add). This allows an attacker to insert arbitrary JavaScript as user input, which will be executed whenever the affected snippet is loaded.
Affected products
2Patches
Vulnerability mechanics
References
1- github.com/wolfcms/wolfcms/issues/682nvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.